DV SSL/TLS Certificate for mail.muz.gov.mn

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the mail.muz.gov.mn DV SSL/TLS Certificate

This certificate with serial number 06:c9:86:d9:9e:a9:22:b8:1c:d6:a1:06:b3:f0:2e:43:47:8a for mail.muz.gov.mn was issued on by Let's Encrypt.

With 3 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for mail.muz.gov.mn provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:c9:86:d9:9e:a9:22:b8:1c:d6:a1:06:b3:f0:2e:43:47:8a
Serial Number (int): 591249717839544613731190997145299835897738
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 7d:32:a1:6e:00:6e:ae:62:d3:a3:c1:19:14:04:1f:26:da:bb:38:b5
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): 3f:c2:65:95:ad:2b:c3:f4:e9:75:b7:8c:a0:a4:95:13:06:91:87:a6
Fingerprint (SHA-256): 59:8d:82:b2:f0:91:12:11:37:08:1c:24:c4:f9:5c:d1:eb:81:72:b2:85:53:9e:a1:83:7a:34:d5:eb:e4:37:89

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/11.crl

Check the revocation status for certificate mail.muz.gov.mn
3
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for mail.muz.gov.mn

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for mail.muz.gov.mn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvik3CwsfXk8rxZiML7Pd
UXB58wFGHMi4Ejrs+mDwwOkLAOW9nXhGDCKrnnb/FuW99K6PaFyFwLS1sgIR9aV7
QqZCoHgQXrnfOcR9Am7SDw/W1SojsYF3VGU4UB5ewBjhF0ZRntuvNLZY/fprflS6
GpWVg9MScAMcn1UEBcd83uhO5t6xLpwcutTz3fTutjtLpLLdt+xk++kkahWu18pM
3H3Pz8is01sPhihh5f5IKpC5ci9DMi3i+Ymmad5QCiCiVk+EObxH4OkBk0zmIDKD
7OBKSNAVrnzbV2/JexfnBSqdhaxZb02GLkpVUdCIuDDccq2gUEWzTz1M2zBVHdxd
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 591249717839544613731190997145299835897738
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-15 01:32:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-10-13 01:32:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.muz.gov.mn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24005601823577745887744413620953679052161536825539893766296156190781179103043806397362527720647094737819234550623535285982329729365249271848742811858144352676835864845567852254378027987699282686484186548973537471300353254866877040218182712329733536314475143441706337292863946224780686702595154172968424723074785383540489935385671404044639154018098713519437083041438619284679292986034245707739393190963143767771674951574624946568935051262926318186964756382761921644507427302953754796698876295986259212885260755557810840981039729967444279918687193450728011496104427393833372108710723384392795668048643443619850622885307
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7d32a16e006eae62d3a3c11914041f26dabb38b5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.muz.gov.mn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muz.gov.mn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.muz.gov.mn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/11.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db0000001980bebb068000004030046304402204d6496560c9658d4084eb8864aa38902b5a9e0f3e80d2213a3b5bbe88a43622302206a4402b4f6a20d2700c3e66ec20a7a328cde22d0021bbcec40d8f6fa1fd18dbc007700af181a28d68ca3e0a98a4c9c67ab09f8bbbc22baaebcb138a3a19dd3f9b6030d000001980bebb1800000040300483046022100aae1f28dd6dd5415b08eb2bd66d9d08085a65cf13a736824eb339848241ed747022100d404695a4eb34ff90ed955925924c7e2be0a0d39365d37afeecd5b7e54092087
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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